Логотип exploitDog
bind:CVE-2023-53904
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-53904

Количество 2

Количество 2

nvd логотип

CVE-2023-53904

около 2 месяцев назад

Xenforo 2.2.13 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the smilie category title parameter. Attackers can create a smilie category with a malicious script that will execute when the admin panel is loaded, potentially enabling further client-side attacks.

CVSS3: 4.6
EPSS: Низкий
github логотип

GHSA-9c7h-vhfv-w99x

около 2 месяцев назад

Xenforo 2.2.13 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the smilie category title parameter. Attackers can create a smilie category with a malicious script that will execute when the admin panel is loaded, potentially enabling further client-side attacks.

CVSS3: 4.6
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-53904

Xenforo 2.2.13 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the smilie category title parameter. Attackers can create a smilie category with a malicious script that will execute when the admin panel is loaded, potentially enabling further client-side attacks.

CVSS3: 4.6
0%
Низкий
около 2 месяцев назад
github логотип
GHSA-9c7h-vhfv-w99x

Xenforo 2.2.13 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the smilie category title parameter. Attackers can create a smilie category with a malicious script that will execute when the admin panel is loaded, potentially enabling further client-side attacks.

CVSS3: 4.6
0%
Низкий
около 2 месяцев назад

Уязвимостей на страницу